REVIEW NOTES — FixMate

Issue: App crashed or froze during camera capture and video playback on certain devices.

Fix: Fixed a race condition in the camera capture component where the video stream was attached before the video element mounted. Added stream auto-restart (onended handler) and video playback auto-resume (onPause handler) to prevent the feed from freezing. Applied safe-area-inset top padding to prevent UI overlap with the iOS notch/status bar on all pages.

Issue: Screenshots did not meet App Store quality standards.

Fix: Screenshots were re-captured at the correct device sizes (6.7", 6.5", 5.5") with the native iOS status bar (9:41) displayed. A dedicated Screenshot Export tool was built into the app (/ScreenshotExport) to generate App Store-compliant screenshots with proper status bar, safe areas, and resolution.

Issue: IAP products were not submitted in App Store Connect.

Fix: All four IAP products have been created and submitted in App Store Connect: Pro Monthly, Pro Annual, Business Monthly, Business Annual. Product IDs are configured in the app and match App Store Connect exactly.

Issue: Missing IAP/Subscription legal disclosure links in the app UI.

Fix: Privacy Policy and Terms of Service links are now accessible from the Profile page and the Pricing page. Links to manage/cancel subscriptions (via Apple ID settings) are clearly presented. Auto-renewal terms, pricing, and cancellation instructions are displayed on the Pricing page before purchase.

Issue: UIBackgroundModes 'audio' entry present in native config.

Fix: The 'audio' UIBackgroundModes entry has been removed from the native platform configuration. The app does not require background audio.

Issue: Potential exposure of other users' data to admin accounts on the Profile page.

Fix: The Profile page now filters saved items, diagnoses, and maintenance reminders by the current user's ID. Admin accounts can no longer see other users' personal data through the Profile interface. Row-Level Security (RLS) is enforced on all user-specific entities so each user only reads and modifies their own records.

Issue: Subscription entity lacked proper access controls.

Fix: RLS applied to the Subscription entity — only the subscription owner and admins can read; create/update/delete restricted to admins. This prevents unauthorized access to billing records.

Issue: App must provide an in-app account deletion option.

Fix: A "Delete Account" button is available on the Profile page. Tapping it shows a confirmation dialog explaining the action is permanent. On confirmation, a backend function deletes the user's account and all associated data. A data-deletion policy page is also available at /data-deletion.

Issue: Delete button on History page overlapped with the severity badge.

Fix: Repositioned the delete button to prevent overlap with the severity badge on diagnosis history cards.

Issue: iOS notch/status bar overlap on multiple pages.

Fix: Applied a global safe-top CSS class (using env(safe-area-inset-top)) to all root page containers, navigation, and main content areas for consistent notch handling across iPhone and iPad devices.

Issue: App uses a third-party login service (Google) but does not offer Sign in with Apple as required by Guideline 4.8.

Fix: "Sign in with Apple" has been added to both the Login and Register pages alongside the existing "Continue with Google" button. The Apple button uses the platform's native OAuth flow (loginWithProvider("apple")) and is styled per Apple's Human Interface Guidelines (black background, white Apple logo and text). Users who sign in with Google are also offered Sign in with Apple as an equivalent option.

Issue: App or its metadata contained references to Google Play or the Android platform.

Fix: All Google Play / Android references have been removed from user-facing content. The data-deletion policy page no longer mentions Google Play. The App Store Connect description has been revised to remove any Android-specific terminology. The app is presented exclusively as an iOS application.

Issue: The demo account credentials provided in the previous submission did not work.

Fix: The correct demo account credentials have been provided in the App Store Connect review notes field (not hardcoded in the app for security). The demo account (jungleone43@gmail.com) has an active Pro subscription and is pre-loaded with sample saved items and diagnosis history. Please use the credentials provided in the App Review Information section of App Store Connect.